`@angular/ssr`

Ecosystem:
npm

Package URL:
pkg:npm/@angular/ssr

Total PRs:
938 Dependabot PRs

Latest PR:
3 days ago

Unique Repositories:
425 repositories

Unique Repos (30 days):
20 repositories

Security Advisories

Angular SSR has Open Redirect and Request Steering via Encoded X-Forwarded-Prefix

GHSA-69xr-m8h6-h664 CVE-2026-44437 MODERATE published 28 days ago • updated 5 days ago

### Description A vulnerability exists in the `X-Forwarded-Prefix` header processing logic within Angular SSR. The internal validation mechanism fa...

Angular SSR is vulnerable to SSRF and Header Injection via request handling pipeline

GHSA-x288-3778-4hhx CVE-2026-27739 CRITICAL published 3 months ago • updated 14 days ago

A [Server-Side Request Forgery (SSRF)](https://developer.mozilla.org/en-US/docs/Web/Security/Attacks/SSRF) vulnerability has been identified in the...

View all 6 advisories

Recent PRs

RSS Feed

build(deps): bump the all-updates group across 1 directory with 18 updates

iuru2522/angular-firebase-playground #48

21.2.3 → 21.2.5 Patch PR

Open 2 months ago 2 comments

deps: bump @angular/ssr from 21.2.2 to 21.2.4

andrejkoller/quiztime-frontend #34

21.2.2 → 21.2.4 Patch PR

Open 2 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 1 directory with 3 updates

m-idriss/photocalia #649

21.1.3 → 21.2.3 Minor PR

Closed 2 months ago 4 comments

chore(deps): bump the frontend-patch-minor group in /frontend with 20 updates

Prekzursil/momentstudio #496

21.2.2 → 21.2.3 Patch PR

Open 2 months ago 6 comments

Bump @angular/ssr from 21.2.0 to 21.2.3

filipsobol/sonda #267

21.2.0 → 21.2.3 Patch PR

Open 3 months ago 2 comments

Bump @angular/ssr from 21.1.4 to 21.2.3

hmcts/opal-frontend #2354

21.1.4 → 21.2.3 Minor PR

Closed 3 months ago 2 comments

Bump @angular/ssr from 20.3.20 to 20.3.21 in /angular-ssr in the npm_and_yarn group across 1 directory

Almucero/Proyecto-Intermodular #10

20.3.20 → 20.3.21 Patch PR

Open 3 months ago 2 comments

chore(deps): bump @angular/ssr from 21.2.2 to 21.2.3 in /frontend

Prekzursil/momentstudio #492

21.2.2 → 21.2.3 Patch PR

Open 3 months ago 3 comments

Bump @angular/ssr from 20.3.16 to 20.3.21

QutEcoacoustics/workbench-client #2611

20.3.16 → 20.3.21 Patch PR

Closed 3 months ago 1 comment

Bump @angular/ssr from 21.2.0 to 21.2.3

simplicreate/simplicreate-web #21

21.2.0 → 21.2.3 Patch PR

Closed 3 months ago 2 comments

build(deps): bump @angular/ssr from 21.2.2 to 21.2.3

DaveMBush/SmartNgRX #1235

21.2.2 → 21.2.3 Patch PR

Open 3 months ago 1 comment

Bump the npm_and_yarn group across 1 directory with 2 updates

BeeHache/ares #155

21.2.2 → 21.2.3 Patch PR

Closed 3 months ago 1 comment

Bump @angular/ssr from 20.3.15 to 20.3.21 in /portfolio-angular

fserech/Portafolio #35

20.3.15 → 20.3.21 Patch PR

Open 3 months ago 1 comment

chore(deps): bump @angular/ssr from 21.2.0 to 21.2.3

keycloakify/angular-email #35

21.2.0 → 21.2.3 Patch PR

Closed 3 months ago 1 comment

chore(deps): bump @angular/ssr from 21.2.0 to 21.2.3

ng-select/ng-select #2776

21.2.0 → 21.2.3 Patch PR

Open 3 months ago 1 comment

chore(deps): bump @angular/ssr from 21.2.0 to 21.2.3

primefaces/primeng #19486

21.2.0 → 21.2.3 Patch PR

Open 3 months ago 2 comments

chore(deps): bump @angular/ssr from 20.3.7 to 20.3.21 in /app

ajcuddeback/nimbus #43

20.3.7 → 20.3.21 Patch PR

Closed 3 months ago 1 comment

Bump @angular/ssr from 21.0.5 to 21.2.3

CSharpFiasco/www.carlosmartos.com #113

21.0.5 → 21.2.3 Minor PR

Closed 3 months ago 1 comment

build(deps): bump the all-updates group across 1 directory with 16 updates

iuru2522/angular-firebase-playground #43

21.2.2 → 21.2.3 Patch PR

Closed 3 months ago 3 comments

chore(deps): bump the frontend-patch-minor group across 1 directory with 18 updates

Prekzursil/momentstudio #486

21.2.1 → 21.2.2 Patch PR

Open 3 months ago 4 comments

Bump @angular/ssr from 21.0.3 to 21.2.2 in /marketplace-ui

axonivy-market/marketplace #569

21.0.3 → 21.2.2 Minor PR

Closed 3 months ago 1 comment

build(deps): bump the angular group across 1 directory with 26 updates

WolfSoko/pushup-stats-service #102

21.1.4 → 21.2.1 Minor PR

Open 3 months ago 1 comment

Bump @angular/ssr from 20.3.16 to 20.3.19

bschick/qcrypt #38

20.3.16 → 20.3.19 Patch PR

Closed 3 months ago 1 comment

Bump @angular/ssr from 20.3.10 to 20.3.19 in /AI-Powered-Product-Finder/Product-Finder-Alloydb/Frontend

GoogleCloudPlatform/alloydb-ai-demos #74

20.3.10 → 20.3.19 Patch PR

Closed 3 months ago 1 comment

Bump the npm_and_yarn group across 2 directories with 22 updates

batuhan-basoglu/NET-Web-API-w-Angular #51

17.1.3 → 21.2.0 Major PR

Closed 3 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 2 directories with 27 updates

spartan-ng/spartan #1251

20.3.9 → 20.3.17 Patch PR

Open 3 months ago 2 comments

Bump @angular/ssr from 20.3.16 to 20.3.19

DSpace/dspace-angular #5227

20.3.16 → 20.3.19 Patch PR

Closed 3 months ago 2 comments

Bump @angular/ssr from 19.2.19 to 19.2.22

contentful/composable-storefront-integration-example #85

19.2.19 → 19.2.22 Patch PR

Open 3 months ago 1 comment

Bump @angular/ssr from 21.1.4 to 21.2.0 in /chapter-15

PacktPublishing/Spring-Boot-and-Angular-2E_Frontend #69

21.1.4 → 21.2.0 Minor PR

Closed 3 months ago 1 comment

Bump @angular/ssr from 21.1.4 to 21.2.0 in /chapter-14

PacktPublishing/Spring-Boot-and-Angular-2E_Frontend #64

21.1.4 → 21.2.0 Minor PR

Closed 3 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 4 directories with 9 updates

qenex-ai/nx #310

21.0.2 → 21.1.5 Minor PR

Closed 3 months ago 1 comment

chore(deps): bump the angular group across 1 directory with 25 updates

WolfSoko/pushup-stats-service #63

21.1.4 → 21.2.0 Minor PR

Closed 3 months ago 2 comments

chore(deps-dev): bump the angular group with 4 updates

db-ux-design-system/core-web #6202

20.3.17 → 20.3.18 Patch PR

Open 3 months ago 2 comments

chore(deps): bump the npm_and_yarn group across 4 directories with 10 updates

lexpank/nx #14

21.1.0 → 21.1.5 Patch PR

Closed 3 months ago 1 comment

deps: bump the npm_and_yarn group across 1 directory with 20 updates

andrejkoller/quiztime-frontend #6

18.2.6 → 21.2.0 Major PR

Open 3 months ago 1 comment

build(deps): bump the npm_and_yarn group across 23 directories with 5 updates

Sin-Estres-dev/angular #19

19.2.0-next.0 → 19.2.21 Patch PR

Closed 3 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 4 directories with 9 updates

qenex-ai/nx #308

21.0.2 → 21.1.5 Minor PR

Closed 3 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 2 directories with 6 updates

michaelhughes2501/firebase #4

20.3.7 → 20.3.17 Patch PR

Open 3 months ago 1 comment

Bump @angular/ssr from 21.1.5 to 21.2.0

filipsobol/sonda #255

21.1.5 → 21.2.0 Minor PR

Open 3 months ago 2 comments

Bump @angular/ssr from 21.1.2 to 21.2.0

ericthalakottur/portfolio #3

21.1.2 → 21.2.0 Minor PR

Open 3 months ago 1 comment

Bump the npm_and_yarn group across 2 directories with 26 updates

batuhan-basoglu/NET-Web-API-w-Angular #47

17.1.3 → 21.2.0 Major PR

Closed 3 months ago 1 comment

chore(deps): bump @angular/ssr from 21.1.3 to 21.2.0

SAP/spartacus #21201

21.1.3 → 21.2.0 Minor PR

Closed 3 months ago 1 comment

build(deps): bump the npm_and_yarn group across 41 directories with 6 updates

sizzlebop/builder #66

19.0.6 → 19.2.21 Minor PR

Closed 3 months ago 1 comment

build(deps): bump the npm_and_yarn group across 40 directories with 6 updates

sizzlebop/builder #65

19.0.6 → 19.2.21 Minor PR

Closed 3 months ago 1 comment

chore(deps): bump @angular/ssr from 19.2.18 to 19.2.22

forepath/agenstra #229

19.2.18 → 19.2.22 Patch PR

Closed 3 months ago 1 comment

build(deps): bump the npm_and_yarn group across 40 directories with 6 updates

ANT0071/builder #58

17.3.17 → 19.2.21 Major PR

Closed 3 months ago 1 comment

build(deps): bump the npm_and_yarn group across 39 directories with 6 updates

ANT0071/builder #57

17.3.17 → 19.2.21 Major PR

Closed 3 months ago 1 comment

build(deps): bump the npm_and_yarn group across 39 directories with 6 updates

robert2687/builder #61

17.3.17 → 19.2.21 Major PR

Open 3 months ago 1 comment

build(deps): bump the npm_and_yarn group across 38 directories with 6 updates

robert2687/builder #60

17.3.17 → 19.2.21 Major PR

Open 3 months ago 1 comment

build(deps): bump the npm_and_yarn group across 38 directories with 6 updates

ANT0071/builder #56

17.3.17 → 19.2.21 Major PR

Closed 3 months ago 1 comment

Package Details

Name:	`@angular/ssr`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/@angular/ssr`
JSON API:	View JSON

Security Advisories

6

Active advisories

CRITICAL 1

HIGH 2

MODERATE 3

View All npm Advisories

Package Information

Description:

Angular server side rendering utilities

Repository:	https://github.com/angular/angular-cli
Homepage:	https://github.com/angular/angular-cli
Latest Release:	`20.0.1` 12 months ago
Dependent Repos:	0
Dependent Packages:	51
Downloads:	1,000,616
Ranking:	Top 37.4966% by dependent repos Top 53.9685% by dependent pkgs

PR Status

Open 499 (53.2%)

Merged 90 (9.6%)

Closed 312 (33.3%)

PR Types

Major 143 (15.2%)

Minor 341 (36.4%)

Patch 416 (44.3%)

@angular/ssr

Security Advisories

Angular SSR has Open Redirect and Request Steering via Encoded X-Forwarded-Prefix

Angular SSR has an Open Redirect via X-Forwarded-Prefix

Protocol-Relative URL Injection via Single Backslash Bypass in Angular SSR

Angular SSR has a Server-Side Request Forgery (SSRF) flaw

Angular SSR is vulnerable to SSRF and Header Injection via request handling pipeline

Recent PRs

Package Details

Security Advisories

6

Package Information

PR Status

PR Types

`@angular/ssr`